Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yQg-bQWlnGZdx7c8cyjGbUUo3c8.roa
File: yQg-bQWlnGZdx7c8cyjGbUUo3c8.roa (raw, json)
Hash identifier: vF/aDiz8rRGa1kf6hzLswN8VSS/llRhpcNxBBW4J6Bw=
Subject key identifier: C9:08:3E:6D:05:A5:9C:66:5D:C7:B7:3C:73:28:C6:6D:45:28:DD:CF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14D8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yQg-bQWlnGZdx7c8cyjGbUUo3c8.roa
Signing time: Thu 08 Sep 2022 04:04:41 +0000
ROA not before: Thu 08 Sep 2022 04:04:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 119.77.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5336 (0x14d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 8 04:04:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C9083E6D05A59C665DC7B73C7328C66D4528DDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:c5:5d:bf:b5:04:76:6a:cf:93:6d:8d:bb:
84:d9:3a:1c:cc:75:4c:ac:65:1b:c3:87:66:f3:16:
26:c8:c3:87:f9:79:fd:75:50:3b:0d:75:1e:e4:5f:
35:59:e0:91:28:19:f9:1d:45:fe:4f:25:89:6a:59:
c3:b3:77:c6:70:0d:ec:3b:5b:1c:85:85:35:74:0e:
62:00:d5:ad:a0:53:86:0b:10:2e:97:d2:a7:32:ab:
96:da:36:56:24:b1:69:58:f2:6e:c5:79:00:42:61:
13:c4:ed:1a:f3:21:61:5e:31:20:1c:0d:e2:b3:f0:
91:3a:47:70:c2:75:34:f9:48:83:c5:0c:41:fa:9f:
2a:63:5e:2c:3c:14:57:a8:c8:c2:1b:33:24:b1:ca:
bc:e1:36:c5:1e:31:42:44:78:52:28:41:7d:93:83:
90:1f:50:77:65:c5:54:7f:20:d4:b1:f0:ee:bf:7b:
fb:fc:b5:de:1a:4f:96:f6:f4:74:b3:61:f8:bb:98:
01:f9:cd:db:77:3b:89:e0:9d:45:e4:80:81:a6:75:
c4:0a:55:af:e9:40:c1:f6:65:13:d2:ad:f9:2f:a1:
b5:4f:a6:6d:24:5f:93:d6:aa:51:22:17:cc:ee:59:
2d:48:c8:2c:84:27:de:78:1f:d3:c3:36:05:6d:63:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:3E:6D:05:A5:9C:66:5D:C7:B7:3C:73:28:C6:6D:45:28:DD:CF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yQg-bQWlnGZdx7c8cyjGbUUo3c8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.160.0/19
Signature Algorithm: sha256WithRSAEncryption
79:76:f0:d4:4b:b1:cc:44:16:d6:be:1f:be:69:83:5b:46:6d:
58:8b:63:87:f8:b1:af:f8:07:ed:36:b6:45:9e:bf:19:4a:b2:
66:b6:82:69:ae:31:30:5a:02:87:93:10:09:1d:0c:a4:f2:94:
1c:3f:32:44:f3:a5:3a:84:7f:4a:ef:be:4e:a8:9b:ec:13:64:
e8:84:f1:5f:61:7c:1c:c8:a2:c3:76:b4:e9:a5:0c:92:a8:d1:
db:01:4c:7b:56:e1:0d:1c:d0:82:73:1a:e6:c5:de:a4:16:47:
d1:4c:51:9e:53:f9:1f:c8:35:8f:84:86:cf:d2:87:a6:8b:c9:
52:2e:6b:7f:c3:a0:fe:c3:02:46:8c:54:ac:38:37:09:5d:6f:
1d:13:d2:34:22:4b:fe:ac:ce:55:34:76:00:00:07:84:83:97:
d7:e4:6b:4f:c1:38:5e:99:d4:80:e2:3c:0a:29:4c:14:4d:60:
88:f4:40:30:4f:0e:d9:f0:88:98:7b:b7:0a:0b:05:15:14:c7:
7b:76:b5:c6:31:32:1f:69:cf:eb:3f:e8:a4:20:48:d0:df:12:
f6:d9:c0:6b:8e:5f:00:44:64:00:5d:02:eb:f4:eb:66:de:e7:
08:14:2a:bd:1b:bc:ba:a3:9a:45:1f:ef:92:28:f9:9b:8c:9d:
00:76:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org